Introduction
This Privacy Policy describes how the Mito mobile application ("we", "our", "the app") collects, uses, stores, and protects your personal information. By installing or using the app, you agree to the collection and use of information in accordance with this policy.
Mito is a fully offline workout-tracking application. All your data lives in only two possible places: on your device (in a private SQLite database), and — only if you choose to enable backup — in a hidden per-app folder on your own Google Drive. Mito has no servers and no online accounts. We never see your data.
The app also offers an optional AI Coach feature. If — and only if — you enable it and provide your own third-party AI provider API key (e.g. Anthropic Claude), the prompts you submit are sent directly from your device to that AI provider. Mito does not relay or store these prompts. See AI Coach below.
Data Controller
- Developer / publisher: Manuel Baer (spatialsparks)
- Contact: info@mitofit.ch
- App package:
com.spatialsparks.mito
Summary of what is collected and where it is stored
| Data | When it is collected | Where it is stored |
|---|---|---|
| Workouts, exercises, sets, reps, weights, durations | Always (core app function) | Locally on your device (SQLite). Optionally backed up to your own Google Drive (see below). |
| Body-weight entries | Only when you log them | Same as above |
| Personal info: display name, height, gender, year of birth, fitness level | Optional, entered by you in onboarding/settings | Same as above |
| Approximate device location (latitude/longitude) | Only when you tap "Use current location" while creating a Location, or when a location-aware routine evaluates whether you are at a saved location | Coordinates of saved Locations are stored on your device (and included in Drive backups if you enable them). Live location reads are not persisted beyond the in-memory check. |
| Google Drive backups | Only when you connect Google Drive in Settings and run a backup (manual or scheduled by you) | Your own Google Drive, in the hidden per-app appDataFolder (not visible in your normal Drive UI, accessible only by Mito on devices signed in to your Google account) |
| AI Coach prompts | Only when you enable the AI Coach in Settings, enter your own AI-provider API key, and submit a prompt | Sent directly from your device over HTTPS to the AI provider you have configured (e.g. Anthropic). Not stored or relayed by Mito. The provider's own retention policy applies. |
We do not collect:
- Advertising identifiers
- Contacts, SMS, calls, or installed-apps lists
- Microphone or camera input
- Photos or media outside what you explicitly export
- Background location
- Crash reports, telemetry, or analytics of any kind
We do not show ads. We do not sell or share your personal data with third parties for marketing.
How we use your data
Your data is used solely to provide the app's functionality, on your own device:
- Persisting your training history, routines, and personal settings on your device.
- Backing up an exported snapshot to your own Google Drive on demand (optional).
- Restoring that snapshot to a new install or a new device (optional).
- Triggering location-aware workout suggestions (optional, only with your explicit permission).
Your fitness data is never used for advertising, profiling, analytics, or any purpose unrelated to the app's stated functionality.
Online services we use (sub-processors)
The app does not use any cloud backend, account system, sync server, or analytics service. The only online integrations are optional Google Drive backup and the optional AI Coach:
| Service | Purpose | Data sent | Provider |
|---|---|---|---|
Google Drive (appDataFolder scope only) | User-initiated backup of your training data | An encrypted-in-transit JSON snapshot of your Mito database | Google LLC, stored under your own Google account |
| AI provider of your choice (e.g. Anthropic Claude) — only if you enable the AI Coach | Generate workout suggestions from a natural-language prompt | A text prompt that includes your free-text request and a small amount of context derived from your profile and selected workout (e.g. fitness level, equipment available, target muscle groups). Sent under your own API key. | The AI provider you have configured. Mito has no commercial agreement with this provider on your behalf. |
When you connect Google Drive, Mito uses Google Sign-In only to obtain the narrowest possible permission (drive.appdata), which restricts Mito to a per-app hidden folder it cannot see anything else in your Drive. Your Google account credentials are handled entirely by Google's sign-in UI; Mito never sees your Google password.
Google's privacy policy: https://policies.google.com/privacy
AI Coach (optional)
Mito ships with an optional AI Coach that helps you draft workouts from a natural-language description. The AI Coach is off by default and requires you to (a) enable it in Settings → AI Coach and (b) supply your own API key for a third-party AI provider (currently Anthropic's Claude).
When you submit a prompt to the AI Coach:
- The prompt is sent directly from your device over HTTPS (TLS) to the AI provider's API endpoint (for Claude:
https://api.anthropic.com/v1/messages). It does not pass through any Mito-operated server. - The request is authenticated using your own API key, which you obtained directly from the AI provider. The key is stored only in your device's local Mito database and is included in the request as a header.
- The body of the request is a custom text prompt that contains: (i) your free-text request, (ii) a system prompt that defines the response format, and (iii) a small amount of contextual information derived from your profile and the workout you are editing — for example, your fitness level, preferred unit system, available equipment, and the muscle groups you are targeting. It does not contain your name, contact details, location, body weight, or full training history.
- The AI provider's response (a workout draft) is returned to your device and processed locally. Nothing is sent back to Mito.
- The AI provider may log, retain, and use your prompt according to its own privacy policy and terms of service. We have no control over that retention. You should review the provider's policy before enabling the feature: e.g. Anthropic's privacy policy at anthropic.com/legal/privacy.
- You can disable the AI Coach and remove your API key at any time in Settings → AI Coach. Once disabled, no further data is sent.
If you do not enable the AI Coach, no prompts are ever sent to any AI provider.
Permissions used
| Android permission | Why |
|---|---|
INTERNET | Drive backup uploads/downloads and AI Coach calls (only when you opt in). |
ACCESS_COARSE_LOCATION / ACCESS_FINE_LOCATION | Reading your current latitude/longitude when you tap "Use current location" or evaluate a location-aware routine. Optional. |
READ_MEDIA_* / file picker | Importing .mito JSON files you choose. |
FOREGROUND_SERVICE / wake lock | Keeping the screen on during an active workout session. |
Permissions are requested at runtime, only at the moment they are needed, and the app remains fully usable if you decline them.
Data storage and security
- All on-device data is stored in the app's private storage area, isolated from other apps by Android.
- Network traffic to Google Drive and to AI providers is encrypted in transit (HTTPS/TLS).
- Google Drive backups live in your own Drive account in the hidden
appDataFolderand are accessible only by Mito (or you, by uninstalling the app and revoking access). - We have no servers, so there is nothing on our side to be breached. Your data only leaves your device if you explicitly upload it to your own Drive or submit a prompt to the AI Coach.
Data retention
- On-device data is retained until you uninstall the app or use Settings → Data → Clear all data.
- Google Drive backups are retained until you delete them from within the app or from your Drive account.
- AI Coach prompts are retained according to the policy of the AI provider you have configured. Mito itself does not retain them.
We retain no data ourselves; there is nothing on our side to delete.
Your rights
- Voluntary participation. Use of every online feature (Google Drive backup, location, AI Coach) is optional. The app is fully functional offline.
- Access and portability. You can export all your data at any time as a
.mitoJSON file via Settings → Backup → Export all data. - Correction. You can edit any of your personal data directly inside the app.
- Deletion. You can delete individual entries inside the app, clear all local data via Settings → Data → Clear all data, delete your Drive backups from within the app, and revoke Google Drive access at https://myaccount.google.com/permissions.
- Withdrawal. You can uninstall the app at any time. Uninstalling removes all on-device data; revoke Drive access and/or delete the backup file to fully remove cloud copies.
- Complaint. You may lodge a complaint with your local data-protection authority. EU/EEA users can find their authority at edpb.europa.eu. Swiss users may contact the FDPIC at edoeb.admin.ch.
To exercise any of these rights or to ask questions about your data, contact the developer at the email listed under Data Controller above.
Children
Mito is not directed at children under 13. Users under the age of majority in their jurisdiction should only use the app with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal data from children under 13; if we become aware that we have, we will delete it.
International data transfers
If you enable Drive backup, Google may store and process your backup file on its global infrastructure, which can include servers outside your country of residence. Google maintains standard contractual clauses and other transfer mechanisms required by GDPR and similar laws. By opting in to Drive backup you consent to these transfers.
If you enable the AI Coach, your prompts are transmitted directly to the AI provider you have configured, which is typically located in the United States and may process the request on global infrastructure. By enabling the AI Coach and submitting a prompt, you consent to this transfer.
Legal basis (GDPR / FADP)
Where the GDPR or the Swiss FADP applies, we process your personal data on the following legal bases:
- Consent (Art. 6(1)(a) GDPR) — for optional Drive backup, optional location features, and the optional AI Coach.
- Performance of a contract (Art. 6(1)(b) GDPR) — for storing your training data on your device, which is the core service the app provides.
You can withdraw consent at any time by disabling the relevant feature in Settings, disconnecting Google Drive, or uninstalling the app.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be highlighted in the app's release notes. The "Last updated" date at the top of this document always reflects the current version. Continued use of the app after a change indicates acceptance of the updated policy.
Contact
- Email: info@mitofit.ch
- Developer: Manuel Baer (spatialsparks)
This privacy policy is intended to comply with the European General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP), and Google Play's User Data and Health policies.